Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/5IPbKdfFbVI9MDpWARpnC_R_LCE.roa
File: 5IPbKdfFbVI9MDpWARpnC_R_LCE.roa (raw, json)
Hash identifier: maRiTvF73EFwBWYepWkVGDsidPDdnzYOjZwYWSj/IpQ=
Subject key identifier: E4:83:DB:29:D7:C5:6D:52:3D:30:3A:56:01:1A:67:0B:F4:7F:2C:21
Certificate issuer: /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial: 1E61
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5IPbKdfFbVI9MDpWARpnC_R_LCE.roa
Signing time: Mon 16 Jun 2025 14:10:04 +0000
ROA not before: Mon 16 Jun 2025 14:10:04 +0000
ROA not after: Thu 09 Apr 2026 06:33:21 +0000
asID: 9391
IP address blocks: 27.103.0.0/16 maxlen: 16
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7777 (0x1e61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Validity
Not Before: Jun 16 14:10:04 2025 GMT
Not After : Apr 9 06:33:21 2026 GMT
Subject: CN=E483DB29D7C56D523D303A56011A670BF47F2C21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f3:2a:2a:16:27:6b:ac:b1:b0:47:c0:92:ca:
e2:8c:6f:85:9d:65:88:e4:a3:f7:14:62:a8:0e:ce:
2c:90:c0:99:9b:8a:22:8c:d4:f1:54:31:90:44:1f:
8c:e2:f7:30:60:48:9a:98:c3:c0:87:7b:5e:8b:39:
f4:e7:04:3a:0e:80:2d:09:dd:ae:f0:32:f6:8c:0c:
e0:61:2c:8b:48:d7:63:07:6a:b3:7d:85:00:aa:38:
74:b4:e3:0c:ba:da:50:92:81:e4:88:2a:93:d3:c1:
d7:54:78:ec:13:7b:3a:8f:88:7a:62:33:cc:64:0e:
de:cb:84:03:7e:8d:8c:3c:b3:02:e6:02:d3:89:e3:
1c:ee:75:e1:94:d6:cf:a0:4d:07:35:90:60:a1:70:
d3:7b:51:3f:80:36:a0:72:f8:96:ed:e5:eb:bf:81:
ca:dd:c8:b8:17:4b:31:0f:01:92:aa:b4:84:b5:3c:
14:8e:d0:1a:2b:8a:b2:4e:e1:3e:2a:29:e2:20:ab:
d9:c3:77:8f:45:3d:c2:99:c6:3d:7d:46:e4:7d:cf:
c2:c6:d3:40:c0:7a:be:94:fb:e3:2e:62:4d:18:e7:
d3:0e:32:d7:c6:69:2c:65:70:14:aa:ff:6b:3d:db:
67:7a:39:2d:65:2d:11:69:25:6b:75:84:77:48:9f:
40:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:83:DB:29:D7:C5:6D:52:3D:30:3A:56:01:1A:67:0B:F4:7F:2C:21
X509v3 Authority Key Identifier:
keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/5IPbKdfFbVI9MDpWARpnC_R_LCE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.103.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:a2:ac:62:54:6f:dd:23:62:e3:ae:cb:27:e7:4f:76:77:53:
e1:3b:c2:5c:4d:de:d0:d9:f7:04:b2:da:8f:7d:61:de:b1:3a:
a8:e2:c3:e0:65:32:4b:24:8e:81:f8:b9:f6:1d:0e:0d:cd:3f:
79:83:91:41:40:7b:c6:94:f1:63:53:2f:7a:5a:e1:92:49:9d:
c5:31:6f:77:d3:84:f4:34:70:6e:59:4e:e0:72:10:af:b7:b4:
80:e8:c8:ef:91:d7:31:7a:c1:c8:14:31:df:f6:72:dd:1b:b6:
53:db:de:bd:df:f7:e9:ae:f4:65:d1:a7:ea:72:c1:5d:ca:5d:
68:98:fd:95:d8:17:22:65:43:47:fb:b1:92:54:48:4f:43:b7:
28:0a:d8:8a:e4:d0:6d:9e:7b:53:ae:61:a5:d6:c8:8c:75:2a:
53:d2:38:8f:89:27:33:99:50:49:56:76:ff:34:82:5a:3d:33:
18:0e:95:a6:fc:d1:cb:07:10:ba:24:18:4f:29:46:4c:e2:03:
b9:65:1c:cd:6c:85:ed:72:51:03:00:c8:d3:ab:9a:31:1f:43:
21:a7:07:ab:6a:6a:e4:07:d7:58:3a:00:15:df:6b:97:35:55:
b2:71:20:c0:69:c8:cd:bb:a7:1c:11:f0:1e:8b:42:7d:76:1f:
6f:7c:90:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:04:02 2025 by rpki-client